CVE-2004-1378

2005-01-1905:00:00

[email protected]

web.nvd.nist.gov

expat

xml parser

jabber

jadc2s

cve-2004-1378

denial of service

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

High

0.073 Low

EPSS

Percentile

94.1%

JSON

The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.

Affected configurations

NVD

Node

jabberstudiojabberdMatch1.4

jabberstudiojabberdMatch1.4.1

jabberstudiojabberdMatch1.4.2

jabberstudiojabberdMatch1.4.2a

jabberstudiojabberdMatch1.4.3

jabberstudiojadc2sMatch0.6

jabberstudiojadc2sMatch0.7

jabberstudiojadc2sMatch0.8

jabberstudiojadc2sMatch0.9

CPENameOperatorVersion
jabberstudio:jabberdjabberstudio jabberdeq1.4
jabberstudio:jabberdjabberstudio jabberdeq1.4.1
jabberstudio:jabberdjabberstudio jabberdeq1.4.2
jabberstudio:jabberdjabberstudio jabberdeq1.4.2a
jabberstudio:jabberdjabberstudio jabberdeq1.4.3
jabberstudio:jadc2sjabberstudio jadc2seq0.6
jabberstudio:jadc2sjabberstudio jadc2seq0.7
jabberstudio:jadc2sjabberstudio jadc2seq0.8
jabberstudio:jadc2sjabberstudio jadc2seq0.9

CPE	Name	Operator	Version
jabberstudio:jabberd	jabberstudio jabberd	eq	1.4
jabberstudio:jabberd	jabberstudio jabberd	eq	1.4.1
jabberstudio:jabberd	jabberstudio jabberd	eq	1.4.2
jabberstudio:jabberd	jabberstudio jabberd	eq	1.4.2a
jabberstudio:jabberd	jabberstudio jabberd	eq	1.4.3
jabberstudio:jadc2s	jabberstudio jadc2s	eq	0.6
jabberstudio:jadc2s	jabberstudio jadc2s	eq	0.7
jabberstudio:jadc2s	jabberstudio jadc2s	eq	0.8
jabberstudio:jadc2s	jabberstudio jadc2s	eq	0.9